$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/95720ecd-8c17-3cb1-b286-44ec240fca8c.roa File: 95720ecd-8c17-3cb1-b286-44ec240fca8c.roa (raw, json) Hash identifier: rb7+blhixb9RZrzkJCyvTqdWiqnxbQ1M8TaqcpegfXs= Subject key identifier: 7E:80:86:BD:A4:EB:AA:C0:9B:56:A0:36:5D:72:AC:8A:0F:F3:7A:03 Certificate issuer: /CN=db131796-a27d-48da-80e5-76b8e7c0cbd3 Certificate serial: 010D0C9F432858498769A95FC6886A03FCADABC0 Authority key identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/95720ecd-8c17-3cb1-b286-44ec240fca8c.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 2902 IP address blocks: 129.72.0.0/16 maxlen: 24 192.65.143.0/24 maxlen: 24 192.84.113.0/24 maxlen: 24 192.160.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:a9:5f:c6:88:6a:03:fc:ad:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db131796-a27d-48da-80e5-76b8e7c0cbd3 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=4fafadbf-dfcc-4298-9529-3630053e9502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:74:d7:f4:18:1d:18:16:11:e0:e4:61:31: 82:54:41:bc:66:23:9d:ec:c6:50:50:d0:75:20:6e: 77:65:e8:a9:31:c0:89:bb:d4:09:0d:59:84:c5:34: 9f:f0:e9:ce:5c:5e:1f:73:3a:c1:9b:6f:3e:4e:51: a3:06:a1:d8:ef:6e:90:fa:2d:29:c4:ce:92:69:f1: ee:a8:38:56:97:4f:87:28:f8:7c:df:33:6f:32:61: ce:11:17:10:6b:79:21:69:2f:ca:76:59:bf:5b:bc: 73:0a:4a:a7:4f:4a:29:32:35:6c:d6:cc:a1:67:19: 04:c7:13:5d:71:ca:9d:ab:57:06:99:7d:c4:54:c4: d3:9d:fe:8c:80:af:6f:ac:6f:8c:9a:e5:3c:5e:71: 78:f7:0b:13:b4:b0:d2:9f:16:0b:48:ca:61:7b:8e: d1:9d:bb:d0:aa:97:23:83:82:8b:1d:34:81:d0:d5: 01:77:d8:8f:9a:0b:71:c9:fa:32:d7:5f:b0:84:00: 52:52:e6:05:54:b4:b2:43:bc:92:33:fa:f0:4e:07: ee:c1:a9:30:fc:43:1d:aa:d0:13:16:c6:d3:31:90: 98:dd:26:a8:18:ef:67:8f:54:c2:89:f6:ba:b9:47: 34:a6:61:f5:41:d9:64:8d:0d:47:f7:7c:33:b6:f2: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:80:86:BD:A4:EB:AA:C0:9B:56:A0:36:5D:72:AC:8A:0F:F3:7A:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/95720ecd-8c17-3cb1-b286-44ec240fca8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.crl X509v3 Authority Key Identifier: keyid:B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer sbgp-ipAddrBlock: critical IPv4: 129.72.0.0/16 192.65.143.0/24 192.84.113.0/24 192.160.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:67:18:e5:c1:16:f7:c2:b5:0f:72:ab:3f:f8:b3:6c:e9:0f: a6:ee:f0:6e:86:c1:9c:07:78:5a:d2:f8:f0:92:c8:8f:1f:e4: f2:5f:19:9e:69:a0:b7:09:47:d6:07:37:f1:09:d1:f9:86:25: 00:49:47:55:ef:33:e7:ab:61:d2:4e:cc:04:f4:78:9e:36:bc: 2d:a6:56:ad:8e:76:57:b7:a3:15:6b:8c:f0:96:98:5c:31:af: 14:45:73:c5:97:1d:7f:f9:e0:c2:89:2a:f9:02:c6:8f:5a:7c: 08:4d:1b:94:28:b8:27:ea:70:70:98:2c:19:87:b4:72:37:77: da:9c:2c:12:72:31:a8:aa:1e:c0:a0:82:b3:1f:97:e8:33:df: b4:4e:38:46:f4:f7:17:b9:9c:28:5c:c4:54:72:69:1e:60:8b: 8f:ae:ea:06:ab:93:e3:f0:e3:53:97:f5:f7:92:ff:6a:05:d1: 72:d4:2e:03:75:23:b4:ec:23:4c:2b:2e:d2:18:db:59:14:a8: 90:4a:9c:ac:fb:1c:95:d8:01:62:44:d5:c7:b8:8b:dd:b8:ab: 82:eb:72:84:08:d7:d0:6c:f6:3b:ca:16:f5:ce:85:39:58:e0: 5f:ed:07:7c:35:c2:cb:09:4e:1a:1c:7b:94:af:d6:17:66:94: c5:50:b2:4f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEmHaalfxohqA/ytq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIxMzE3OTYtYTI3ZC00OGRhLTgwZTUtNzZiOGU3YzBj YmQzMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NGZhZmFkYmYtZGZjYy00Mjk4LTk1MjktMzYzMDA1M2U5NTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqh01/QYHRgWEeDkYTGCVEG8ZiOd7MZQUNB1 IG53ZeipMcCJu9QJDVmExTSf8OnOXF4fczrBm28+TlGjBqHY726Q+i0pxM6SafHu qDhWl0+HKPh83zNvMmHOERcQa3khaS/Kdlm/W7xzCkqnT0opMjVs1syhZxkExxNd ccqdq1cGmX3EVMTTnf6MgK9vrG+MmuU8XnF49wsTtLDSnxYLSMphe47RnbvQqpcj g4KLHTSB0NUBd9iPmgtxyfoy11+whABSUuYFVLSyQ7ySM/rwTgfuwakw/EMdqtAT FsbTMZCY3SaoGO9nj1TCifa6uUc0pmH1QdlkjQ1H93wztvLQEwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFH6Ahr2k66rAm1agNl1yrIoP83oDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjEz MTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4ZTdjMGNiZDMvOTU3MjBlY2QtOGMxNy0z Y2IxLWIyODYtNDRlYzI0MGZjYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGIxMzE3OTYtYTI3ZC00OGRhLTgw ZTUtNzZiOGU3YzBjYmQzL2RiMTMxNzk2LWEyN2QtNDhkYS04MGU1LTc2YjhlN2Mw Y2JkMy5jcmwwHwYDVR0jBBgwFoAUue3K3qkHUolV9qvgFYie93MR9pUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYjEzMTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4 ZTdjMGNiZDMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMAgUgDBADA QY8DBADAVHEDBADAoDEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZGcY5cEW98K1D3KrP/izbOkPpu7wbobB nAd4WtL48JLIjx/k8l8ZnmmgtwlH1gc38QnR+YYlAElHVe8z56th0k7MBPR4nja8 LaZWrY52V7ejFWuM8JaYXDGvFEVzxZcdf/ngwokq+QLGj1p8CE0blCi4J+pwcJgs GYe0cjd32pwsEnIxqKoewKCCsx+X6DPftE44RvT3F7mcKFzEVHJpHmCLj67qBquT 4/DjU5f195L/agXRctQuA3UjtOwjTCsu0hjbWRSokEqcrPscldgBYkTVx7iL3bir gutyhAjX0Gz2O8oW9c6FOVjgX+0HfDXCywlOGhx7lK/WF2aUxVCyTw== -----END CERTIFICATE-----Generated at Sat Apr 19 16:03:13 2025 by rpki-client